{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:4AOHVSDOHUNM74MFZEURXDYQKT","short_pith_number":"pith:4AOHVSDO","canonical_record":{"source":{"id":"2104.09667","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-04-19T22:17:27Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"2ed5a866cea82947d0ed51e01d10a05920c370dbd57d43d81797054d87b9f596","abstract_canon_sha256":"aa63c93c04fd8c437d67c5c57b0185ac703c5d6a9f074e2b88452b44bab08730"},"schema_version":"1.0"},"canonical_sha256":"e01c7ac86e3d1acff185c9291b8f1054c1c916b6c0c5a47a754f98f7d9967ad6","source":{"kind":"arxiv","id":"2104.09667","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.09667","created_at":"2026-07-05T02:46:27Z"},{"alias_kind":"arxiv_version","alias_value":"2104.09667v2","created_at":"2026-07-05T02:46:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.09667","created_at":"2026-07-05T02:46:27Z"},{"alias_kind":"pith_short_12","alias_value":"4AOHVSDOHUNM","created_at":"2026-07-05T02:46:27Z"},{"alias_kind":"pith_short_16","alias_value":"4AOHVSDOHUNM74MF","created_at":"2026-07-05T02:46:27Z"},{"alias_kind":"pith_short_8","alias_value":"4AOHVSDO","created_at":"2026-07-05T02:46:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:4AOHVSDOHUNM74MFZEURXDYQKT","target":"record","payload":{"canonical_record":{"source":{"id":"2104.09667","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-04-19T22:17:27Z","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"title_canon_sha256":"2ed5a866cea82947d0ed51e01d10a05920c370dbd57d43d81797054d87b9f596","abstract_canon_sha256":"aa63c93c04fd8c437d67c5c57b0185ac703c5d6a9f074e2b88452b44bab08730"},"schema_version":"1.0"},"canonical_sha256":"e01c7ac86e3d1acff185c9291b8f1054c1c916b6c0c5a47a754f98f7d9967ad6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:46:27.566003Z","signature_b64":"NbWUYDo1vhCYC9cdNYproppM0ugKQ8ERQyEJFFyZrx+kws10txOIiPGQwBvrsIdTV6ydUVatTn+d/5LrCk+qCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e01c7ac86e3d1acff185c9291b8f1054c1c916b6c0c5a47a754f98f7d9967ad6","last_reissued_at":"2026-07-05T02:46:27.565549Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:46:27.565549Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2104.09667","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:46:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ih2G3+pqPh03I2MqpurDmPDzF3hcI9pgVEnD3l7s/bHN43eBfg+p17xKk6uHBNf2PbPz9jYb0jJARs0usuhBBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T02:24:25.803393Z"},"content_sha256":"78259281ccbb18af223fc45035d4a800e0d6d479daf93cee78d5d5d1a4ac8063","schema_version":"1.0","event_id":"sha256:78259281ccbb18af223fc45035d4a800e0d6d479daf93cee78d5d5d1a4ac8063"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:4AOHVSDOHUNM74MFZEURXDYQKT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Manipulating SGD with Data Ordering Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Dmitry Kazhdan, Ilia Shumailov, Murat A. Erdogdu, Nicolas Papernot, Ross Anderson, Yiren Zhao, Zakhar Shumaylov","submitted_at":"2021-04-19T22:17:27Z","abstract_excerpt":"Machine learning is vulnerable to a wide variety of attacks. It is now well understood that by changing the underlying data distribution, an adversary can poison the model trained with it or introduce backdoors. In this paper we present a novel class of training-time attacks that require no changes to the underlying dataset or model architecture, but instead only change the order in which data are supplied to the model. In particular, we find that the attacker can either prevent the model from learning, or poison it to learn behaviours specified by the attacker. Furthermore, we find that even "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.09667","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2104.09667/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:46:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NTZ0moPwr76Bfxu2WkJy15Z6B5MA+B8/vBqcdeM8nCe/XJHOeG4hzmxX5Pfee6kD20zBdidRAw6xlW4XQelACQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T02:24:25.803899Z"},"content_sha256":"20319ebb9716c134147d3a6b7ae5e822c2e711326e43029349608e71d652e45a","schema_version":"1.0","event_id":"sha256:20319ebb9716c134147d3a6b7ae5e822c2e711326e43029349608e71d652e45a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4AOHVSDOHUNM74MFZEURXDYQKT/bundle.json","state_url":"https://pith.science/pith/4AOHVSDOHUNM74MFZEURXDYQKT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4AOHVSDOHUNM74MFZEURXDYQKT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T02:24:25Z","links":{"resolver":"https://pith.science/pith/4AOHVSDOHUNM74MFZEURXDYQKT","bundle":"https://pith.science/pith/4AOHVSDOHUNM74MFZEURXDYQKT/bundle.json","state":"https://pith.science/pith/4AOHVSDOHUNM74MFZEURXDYQKT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4AOHVSDOHUNM74MFZEURXDYQKT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:4AOHVSDOHUNM74MFZEURXDYQKT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"aa63c93c04fd8c437d67c5c57b0185ac703c5d6a9f074e2b88452b44bab08730","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-04-19T22:17:27Z","title_canon_sha256":"2ed5a866cea82947d0ed51e01d10a05920c370dbd57d43d81797054d87b9f596"},"schema_version":"1.0","source":{"id":"2104.09667","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.09667","created_at":"2026-07-05T02:46:27Z"},{"alias_kind":"arxiv_version","alias_value":"2104.09667v2","created_at":"2026-07-05T02:46:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.09667","created_at":"2026-07-05T02:46:27Z"},{"alias_kind":"pith_short_12","alias_value":"4AOHVSDOHUNM","created_at":"2026-07-05T02:46:27Z"},{"alias_kind":"pith_short_16","alias_value":"4AOHVSDOHUNM74MF","created_at":"2026-07-05T02:46:27Z"},{"alias_kind":"pith_short_8","alias_value":"4AOHVSDO","created_at":"2026-07-05T02:46:27Z"}],"graph_snapshots":[{"event_id":"sha256:20319ebb9716c134147d3a6b7ae5e822c2e711326e43029349608e71d652e45a","target":"graph","created_at":"2026-07-05T02:46:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.09667/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning is vulnerable to a wide variety of attacks. It is now well understood that by changing the underlying data distribution, an adversary can poison the model trained with it or introduce backdoors. In this paper we present a novel class of training-time attacks that require no changes to the underlying dataset or model architecture, but instead only change the order in which data are supplied to the model. In particular, we find that the attacker can either prevent the model from learning, or poison it to learn behaviours specified by the attacker. Furthermore, we find that even ","authors_text":"Dmitry Kazhdan, Ilia Shumailov, Murat A. Erdogdu, Nicolas Papernot, Ross Anderson, Yiren Zhao, Zakhar Shumaylov","cross_cats":["cs.AI","cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-04-19T22:17:27Z","title":"Manipulating SGD with Data Ordering Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.09667","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:78259281ccbb18af223fc45035d4a800e0d6d479daf93cee78d5d5d1a4ac8063","target":"record","created_at":"2026-07-05T02:46:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"aa63c93c04fd8c437d67c5c57b0185ac703c5d6a9f074e2b88452b44bab08730","cross_cats_sorted":["cs.AI","cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-04-19T22:17:27Z","title_canon_sha256":"2ed5a866cea82947d0ed51e01d10a05920c370dbd57d43d81797054d87b9f596"},"schema_version":"1.0","source":{"id":"2104.09667","kind":"arxiv","version":2}},"canonical_sha256":"e01c7ac86e3d1acff185c9291b8f1054c1c916b6c0c5a47a754f98f7d9967ad6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e01c7ac86e3d1acff185c9291b8f1054c1c916b6c0c5a47a754f98f7d9967ad6","first_computed_at":"2026-07-05T02:46:27.565549Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:46:27.565549Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NbWUYDo1vhCYC9cdNYproppM0ugKQ8ERQyEJFFyZrx+kws10txOIiPGQwBvrsIdTV6ydUVatTn+d/5LrCk+qCw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:46:27.566003Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.09667","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:78259281ccbb18af223fc45035d4a800e0d6d479daf93cee78d5d5d1a4ac8063","sha256:20319ebb9716c134147d3a6b7ae5e822c2e711326e43029349608e71d652e45a"],"state_sha256":"a4d26fae347adf26926a7796332f64ad860bb966bf914f823db6939c0c3d3976"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VmqxS7WzrRxnpS8bruniESvCu54hjilGVuP9w+I40qC3kQxaF+mOiIjvbetqnzsfO++x9t0I6YFaD7CJfPCmDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T02:24:25.808800Z","bundle_sha256":"94cd9fa653b0c734379e64cad88a599f9d7b19bd8c94c30ad5d60d58492aee38"}}